[Git][security-tracker-team/security-tracker][master] new python-scp issue

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
a828922f by Moritz Muehlenhoff at 2026-10-14T14:21:22+02:00
new python-scp issue

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -4456,7 +4456,9 @@ CVE-2026-109155 (A flaw has been found in DeepPavlov up to 1.7.0. This impacts t
 CVE-2026-109153 (A vulnerability was detected in MosaicML Composer up to 0.32.1. This a ...)
 	NOT-FOR-US: MosaicML Composer
 CVE-2026-109152 (A security vulnerability has been detected in jbardin scp.py up to 0.1 ...)
-	TODO: check
+	- python-scp <unfixed>
+	NOTE: https://github.com/jbardin/scp.py/issues/206
+	NOTE: https://github.com/jbardin/scp.py/commit/42fc3aaa71411daed60544e3b40179c1038bed5d (v0.16.2)
 CVE-2026-109149 (A weakness has been identified in beautifier js-beautify up to 1.15.1/ ...)
 	TODO: check
 CVE-2026-109144 (A vulnerability was identified in wbond certvalidator up to 0.11.1. Th ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a828922f023a67cd2c71e626ca46676ed751f331

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/a828922f023a67cd2c71e626ca46676ed751f331
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261014/29ebfe33/attachment-0001.htm>